Complaint form | European Data Protection Supervisor

1 Start 2 Preview 3 Complete

Before you lodge your complaint, please take a moment to read our Data protection notice.

An asterisk (*) denotes mandatory items. Not replying to mandatory items in the form would leave us unable to properly investigate the complaint and may render your complaint inadmissible.

What is your complaint about?

1. Are you: *

(a) personally affected by the issue(s) at stake in your complaint

(b) not personally concerned, but would like to draw the attention of the EDPS to an alleged breach of data protection rules acting as an informant or whistle-blower?

2. Who are you complaining against? *

Please note that the EDPS is only competent for dealing with complaints against processing by the EU institutions, bodies and agencies. Please also note that we are currently not competent for supervising Eurojust. For complaints concerning Eurojust, please contact the Eurojust JSB

Other *

3. Please describe your complaint and specify which personal data protection rule(s) you believe have been infringed by the institution. *

4. Please explain what you would like the institution to do in order to remedy the alleged breach(es).

5. When did you become aware of the alleged breach(es)? *

Please note that the EDPS will usually not investigate complaints relating to facts which the complainant learned about more than two years ago.

6. If you have supporting documents to substantiate your claim, please upload them here.

The maximum file size is 3 MB per file and you can provide three files at most. If you want to submit additional documents, please let us know. If your supporting documentations adds up to more than 40 pages, please provide a summary.
Files must be less than 3 MB.
Allowed file types: pdf doc docx odt ppt pptx odp xls xlsx ods.

File 2

Files must be less than 3 MB.
Allowed file types: pdf doc docx odt ppt pptx odp xls xlsx ods.

File 3

Files must be less than 3 MB.
Allowed file types: pdf doc docx odt ppt pptx odp xls xlsx ods.

Which other steps have you already taken?

7. Have you already contacted the institution you want to complain against concerning the alleged breach(es)? If yes, please provide details. For example, if you want to complain about the reply you received to your request for personal data, please provide a copy of that reply. *

Yes

If you have not yet contacted the institution (the controller), we recommend that you do so before submitting your complaint. Each institution has a Data Protection Officer (DPO), who may be in a better position to assist you in resolving the issue. As DPOs are closer to the institutions, they may be able to help you more quickly. For the exercise of your right (of access etc.), please always contact the controller first.

Please provide details *

8. Have you submitted the same matter to other bodies (Court of Justice, European Ombudsman, etc.)? *

Yes

Please provide details *

Contact information

9. Your Name (please note: if you are a lawyer acting on behalf of a client, please enter your client's name here, not yours - please enter your details under "contact information" below and attach a power of attorney)

Salutation *

First name(s) *

Family name(s) *

10. Contact information *

please include country information

11. e-mail *

Confidential treatment

12. The EDPS treats all complaints confidentially. However, the investigation of your complaint may require disclosing your identity and the allegations you made to the institution against which you complained and, if necessary for the investigation, to the third parties involved, including national supervisory authorities where relevant. The EDPS will also copy the Data Protection Officer (DPO) of the institution concerned into all correspondence between the EDPS and the institution in question. If it turns out that your complaint falls into the competence of a data protection authority of a Member State, we will forward your complaint to them, as they are the ones who can investigate it. Any public summaries of cases (e.g. for the annual report of the EDPS) will be completely anonymous.

Do you accept this standard confidential treatment of your complaint? If not and you wish to remain anonymous to the institution concerned, to the relevant DPO or to third parties, please explain the reasons for your request. Please also explain which additional safeguards you would like us to take. We will consider how far we can implement these requests and will keep you informed. *

Yes

Please explain the reason of your request *

13. I acknowledge having read and understood the Data protection notice. *

Yes

Link to Data protection notice